Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jNsCmpd9I68wU9Moc1p0TbEfqik.roa
File: jNsCmpd9I68wU9Moc1p0TbEfqik.roa (raw, json)
Hash identifier: 2vzSUouxcRhFq4N6vT0Z1V0HO5NFP9oewI3Yux8VVeU=
Subject key identifier: 8C:DB:02:9A:97:7D:23:AF:30:53:D3:28:73:5A:74:4D:B1:1F:AA:29
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01963606177BD95E69003FD56E903DF8FB89
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jNsCmpd9I68wU9Moc1p0TbEfqik.roa
Signing time: Mon 14 Apr 2025 20:38:10 +0000
ROA not before: Mon 14 Apr 2025 20:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44714
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:06:17:7b:d9:5e:69:00:3f:d5:6e:90:3d:f8:fb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 14 20:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cdb029a977d23af3053d328735a744db11faa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:cb:ad:53:46:f9:95:a3:a5:ca:0f:42:80:
5c:f3:56:8c:a7:c8:fe:0b:4e:17:8b:0f:c7:ad:b3:
dd:b1:eb:a0:0d:b2:eb:6f:3b:ec:1e:eb:18:76:d9:
92:f2:e7:ba:8a:59:0b:58:ba:25:81:4a:bf:c0:5f:
37:31:14:1e:a0:2c:e2:a7:d7:3e:d0:47:f4:fe:21:
c4:6c:22:51:1b:56:1e:21:5b:c2:a0:03:6f:cf:d7:
7d:ea:19:d7:08:37:60:74:02:ad:12:ea:7b:95:64:
e5:63:53:1a:bd:82:de:0b:13:ee:b4:e6:09:b7:3a:
d6:56:83:c8:15:03:43:d2:e7:79:4d:22:89:b6:e7:
f0:9f:d1:0f:84:98:33:b2:56:a4:a3:ea:b7:18:e3:
04:7f:96:1e:48:b5:aa:c6:b9:34:ec:33:b7:c6:a8:
1b:df:e2:eb:af:31:db:34:8b:ba:ac:84:ae:61:4e:
4d:98:c0:c5:1d:83:7f:c6:cc:7b:19:df:2e:76:f6:
82:a4:67:3d:82:60:90:d9:7c:4c:67:f7:fb:68:33:
dd:e1:71:5d:b8:bb:22:a5:98:18:aa:b0:b4:4a:51:
79:0b:23:94:d4:7e:89:a0:34:86:5d:f9:16:b8:27:
00:1b:f2:2f:27:14:39:f5:d7:2d:35:06:c6:21:00:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:02:9A:97:7D:23:AF:30:53:D3:28:73:5A:74:4D:B1:1F:AA:29
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jNsCmpd9I68wU9Moc1p0TbEfqik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:15:a9:c5:e7:d4:8a:b3:26:cf:ed:1b:6f:65:2d:ad:78:84:
a1:69:a8:d6:3c:ae:59:fa:25:29:d1:9a:4a:cc:ed:18:8c:9d:
a0:7f:75:de:75:46:fc:f5:c4:6d:a2:ab:ce:43:de:10:97:aa:
84:18:9c:dd:ca:a1:cb:17:20:25:88:44:fb:f0:27:ed:81:b8:
fb:d7:ed:b2:91:92:e2:08:0f:91:bf:f0:47:78:7c:3c:16:4d:
23:cb:51:32:45:34:3b:d8:1f:be:a8:f5:d1:2f:ab:36:6e:d3:
f2:40:1b:f0:74:e9:74:a3:66:22:ff:2f:9f:e8:7a:9b:35:2f:
0d:98:03:27:e2:fa:cf:91:af:a2:fb:e9:87:04:96:49:e6:1b:
55:a0:9d:3a:08:fc:18:f1:8e:0e:29:af:23:f4:5a:94:c3:dc:
bd:52:52:6e:d6:6e:2b:d0:f0:f0:78:a2:fc:1d:8f:5a:f9:4f:
9d:e3:03:c7:da:22:c7:71:05:7e:72:06:a0:f9:b3:db:f7:49:
30:a1:13:f6:e1:5e:ef:11:fd:76:21:35:06:20:08:14:8e:df:
e5:45:86:52:86:51:b7:34:5e:71:41:ea:a2:46:a1:43:f1:e7:
d5:21:7d:51:0a:56:20:60:6d:90:83:c6:49:3d:d2:ae:07:2e:
d8:4a:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:32:46 2025 by rpki-client